refactor: apply traefik-wide security-headers on websecure entrypoint, minor comment and description changes

This commit is contained in:
forust committed 2026-01-26 08:54:10 +01:00
1 parent d58ae2a5e7
commit 146f63a39b
16 files changed
+25 -101

No files matched your search

+2 -5
View File
@@ -12,22 +12,19 @@ services:
labels:
- "traefik.enable=true"
- "traefik.docker.network=proxy"
# FIXME: traefik.services.glance.loadbalancer.server.port ??
- "traefik.http.services.glance.loadbalancer.server.port=8080"
# Prod Router
- "traefik.http.routers.glance.rule=Host(`glance.forust.xyz`)"
- "traefik.http.routers.glance.entrypoints=websecure"
- "traefik.http.routers.glance.middlewares=security-headers@file"
- "traefik.http.routers.glance.tls=true"
# Local Router
- "traefik.http.routers.glance-local.rule=Host(`glance.workstation.internal`)"
- "traefik.http.routers.glance-local.entrypoints=websecure"
- "traefik.http.routers.glance-local.middlewares=security-headers@file"
- "traefik.http.routers.glance-local.tls=true"
# Dev Router
- "traefik.http.routers.glance-dev.rule=Host(`glance.gigaforust.internal`)"
- "traefik.http.routers.glance-dev.entrypoints=websecure"
- "traefik.http.routers.glance-dev.middlewares=security-headers@file"
- "traefik.http.routers.glance-dev.tls=true"
networks:
- proxy